General

  • Target

    f6ca7c881922c8d686901b0d4e7ec3d8f6949c616281cffd011ded8c0ff3dfc1

  • Size

    1.6MB

  • Sample

    240229-zb6gjscb95

  • MD5

    52576b28157b0aae373e927fc9c56a68

  • SHA1

    e0173b265bf9944223e90689448d1855506fa57b

  • SHA256

    f6ca7c881922c8d686901b0d4e7ec3d8f6949c616281cffd011ded8c0ff3dfc1

  • SHA512

    51548af52fd852d80bec27fdae855c181827d5139952bfa2c15b0337d4534932ae364620e0dd352a77445d1bd8ddf7ec04c9c126231944a8f295b61c69a8b0f5

  • SSDEEP

    24576:sJSLpwfVWRh0SGQ48Lm2194mKa4qrNdW9NTPjgD1GqBbn:sup62ESMTjTPjgD4qBn

Malware Config

Extracted

Family

socelars

C2

https://hdbywe.s3.us-west-2.amazonaws.com/wduwe19/

Targets

    • Target

      f6ca7c881922c8d686901b0d4e7ec3d8f6949c616281cffd011ded8c0ff3dfc1

    • Size

      1.6MB

    • MD5

      52576b28157b0aae373e927fc9c56a68

    • SHA1

      e0173b265bf9944223e90689448d1855506fa57b

    • SHA256

      f6ca7c881922c8d686901b0d4e7ec3d8f6949c616281cffd011ded8c0ff3dfc1

    • SHA512

      51548af52fd852d80bec27fdae855c181827d5139952bfa2c15b0337d4534932ae364620e0dd352a77445d1bd8ddf7ec04c9c126231944a8f295b61c69a8b0f5

    • SSDEEP

      24576:sJSLpwfVWRh0SGQ48Lm2194mKa4qrNdW9NTPjgD1GqBbn:sup62ESMTjTPjgD4qBn

    • Socelars

      Socelars is an infostealer targeting browser cookies and credit card credentials.

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Legitimate hosting services abused for malware hosting/C2

MITRE ATT&CK Enterprise v15

Tasks